RISE Security Questions

[TBroomhead]

Hi,

Working with a customer who would like to understand a bit more around the security aspects of RISE, could anyone help with the following please:

1, Are the SAP PEN Testing reports available to the customer and is there anything omitted - or are they completely transparent ?

2, Do SAP use generic accounts to log into client 000 in RISE S/4HANA or named user ?

3, What level of Ransomware is included in the SAP end to end monitoring process in the Trust Centre with RSIE, is it part of the Malware software?

4, How long are the security logs kept for - what are the retention times broken down by each security log?

Thanks

Tim